apiVersion: v1
kind: Pod
metadata:
  name: disallowed
  namespace: default
spec:
  containers:
    - name: foo
      image: gcr.io/app:latest
      resources:
        limits:
          cpu: 1
          memory: 128Mi
        requests:
          cpu: 1
